Improper Input Validation

org.apache.tomcat, tomcat-coyote is vulnerable to Improper Input Validation. The vulnerability is due to incorrect error handling of invalid HTTP priority headers, which causes incomplete clean-up of failed requests and a memory leak, allowing an attacker to send many malformed requests to exhaus...

SAMSUNG Flow 安全漏洞

SAMSUNG Flow is a software product from the South Korean company Samsung SAMSUNG. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in SAMSUNG Flow versions prior to 4.9.17.6, which stems from improper input validation and could allow a...

SAMSUNG Gallery 安全漏洞

SAMSUNG Gallery is an application from the South Korean company Samsung SAMSUNG. The best image and video viewing application for Galaxy users. SAMSUNG Gallery suffers from a security vulnerability that stems from improper input validation and could lead to a local attacker accessing internal dat...

CVE-2025-21460 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

CVE-2024-45579 Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45579 Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45577 Improper Input Validation in Camera Driver

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

Regular Expression Denial Of Service (ReDoS)

org.apereo.cas, cas-server-core-configuration-metadata-repository is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to improper processing of the "Name" argument without input validation, which allows remote attackers to trigger excessive backtracking and degra...

CVE-2024-13943

Tesla Model S Iris Modem QCMAPConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the targ...

The vulnerability in macOS operating systems, related to improper validation of input data, allows attackers to trigger a service failure.

The vulnerability of macOS operating systems is related to improper validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ASB-A-369911749

In MMapVAccess of pmros.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-30391

Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network...

CVE-2025-30391

CVE-2025-30391 affects Microsoft Dynamics (e.g., Dynamics 365 Customer Service) and is due to improper input validation that allows an unauthorized attacker to disclose information over a network. Public sources indicate network exposure with high impact on confidentiality; CVSS metrics show base...

BIT-TOMCAT-2025-31650 Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

Apache Tomcat 11.0.0.M1 < 11.0.6 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.6security-11 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a...

Apache Tomcat 10.1.0.M1 < 10.1.40 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.40security-10 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.2-ifix1 Vulnerability Details CVEID:CVE-2025-1974 DESCRIPTION: A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve...

CVE-2024-10635

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...